SonarQube 主動掃描：平台自己發動一次掃描

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart LR
    subgraph PULL["拉取快照模式（FR-058.5・已上線）"]
        direction TB
        P1["客戶自己的 CI
跑 sonar-scanner"] --> P2[("客戶
SonarQube")]
        P3["Guidant Agent"] -. "唯讀 API
秒級" .-> P2
        P3 --> P4["組 HTML 報告"]
    end

    subgraph SCAN["主動掃描模式（本案 FR-058.6）"]
        direction TB
        S1["使用者提供源碼
Git URL / 上傳"] --> S2["Guidant Agent"]
        S2 --> S3["跑 sonar-scanner
分鐘~數十分鐘"]
        S3 == "寫入！可能自動建專案" ==> S4[("客戶
SonarQube")]
        S4 -. "排隊處理
必須輪詢" .-> S2
        S2 --> S5["組 HTML 報告"]
    end

    P4 --> E["證據池"]
    S5 --> E

    style S3 fill:#F6EBD5,stroke:#9C6B12
    style S4 fill:#F6E2DE,stroke:#B93A2B
    style E fill:#E4F1EA,stroke:#2E7D5B
      

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
sequenceDiagram
    participant U as 使用者
    participant BE as Guidant 雲端
    participant AG as Agent
    participant SRC as 源碼來源
    participant SC as sonar-scanner
    participant SQ as 客戶 SonarQube

    U->>BE: 選 SonarQube、模式=主動掃描
填源碼位置 + 專案代碼 + 語言類別
    BE->>BE: 敏感參數加密（既有加密鏈）
    BE->>AG: 派工（params + 解密後憑證）

    Note over AG,SRC: 步驟一：取源碼
    AG->>SRC: git clone（或下載上傳包）
    SRC-->>AG: 源碼落地到暫存目錄
    Note right of AG: 暫存用磁碟型 tmp（不可用 /dev/shm，那是記憶體型）
掃完即刪 → D22

    Note over AG,SC: 步驟二：執行掃描
    AG->>SC: 啟動 scanner（Popen + 輪詢取消）
    SC->>SC: 分析（分鐘~數十分鐘）
    SC->>SQ: 推送分析結果
    Note over SQ: 專案不存在會自動建立
D21：一律加 Guidant-AI- 前綴
    SC-->>AG: 產出 report-task.txt

    Note over AG,SQ: 步驟三：等 server 消化（掃完≠能讀）
    AG->>AG: 解析 report-task.txt 取 ceTaskId
    loop 直到 status 脫離 IN_PROGRESS
        AG->>SQ: GET /api/ce/task?id=<ceTaskId>
        SQ-->>AG: task.status
    end
    Note right of AG: CE 顯示的處理時間不含排隊
不能拿來當 timeout 依據

    Note over AG,SQ: 步驟四：拉結果組報告（複用 pull 模式既有程式碼）
    AG->>SQ: quality gate / measures / issues / hotspots
    SQ-->>AG: JSON
    AG->>AG: render 自包含 HTML
    AG-->>BE: 回傳報告 + summary
    BE-->>U: 進證據池（可下載）
      

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart TB
    T["工具清單
1 張『SonarQube』卡"] --> C["設定工具憑證（只做一次）
base_url + token
✅ 兩種模式共用，一個字都不用改"]
    C --> J["建立檢測任務"]
    J --> M{"選擇 scan_mode"}
    M -- "讀取既有結果（預設）" --> P["填 project_key
（branch 選填）"]
    M -- "原始碼掃描" --> S["填 Git repo URL
+ 專案代碼後綴"]
    P --> R1["唯讀拉取・秒級"]
    S --> R2["clone → 掃描 → 推送
→ 輪詢 → 拉結果"]
    R1 --> E["HTML 報告進證據池"]
    R2 --> E

    style C fill:#E4F1EA,stroke:#2E7D5B
    style M fill:#F6EBD5,stroke:#9C6B12
    style E fill:#E4F1EA,stroke:#2E7D5B